This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vp5TOmg5PSChbTXqEn839qbGjU4.roa
File: vp5TOmg5PSChbTXqEn839qbGjU4.roa (raw, json)
Hash identifier: 3ggocbcMjs8++XIEOhfa6mmEv0tRoM8xV2RU3tGAIwU=
Subject key identifier: BE:9E:53:3A:68:39:3D:20:A1:6D:35:EA:12:7F:37:F6:A6:C6:8D:4E
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019B7CEE6D061995BDBAC6BCF77F7D5842F8
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vp5TOmg5PSChbTXqEn839qbGjU4.roa
Signing time: Fri 02 Jan 2026 04:19:18 +0000
ROA not before: Fri 02 Jan 2026 04:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206586
IP address blocks: 2a14:ae00:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:6d:06:19:95:bd:ba:c6:bc:f7:7f:7d:58:42:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jan 2 04:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be9e533a68393d20a16d35ea127f37f6a6c68d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:a2:2a:93:cf:3a:96:27:01:99:3c:ee:02:
1d:59:22:98:89:c9:6c:16:6b:9d:7f:90:8a:07:e1:
c0:c6:64:d9:d2:eb:cb:7f:fb:46:9d:42:62:5e:fb:
25:92:80:43:85:35:2e:9e:9e:67:0f:92:fe:b3:3f:
b1:09:51:3e:28:99:15:82:96:2f:28:c9:b7:a9:c6:
24:56:84:9f:df:82:c7:3b:db:d1:86:f3:af:fb:af:
45:b6:5d:be:b7:58:cd:2b:61:d8:8d:27:b9:60:80:
a6:f4:33:3c:b8:ee:0a:62:30:91:76:b5:2f:30:48:
14:cb:ff:4a:bd:e6:00:a0:28:99:9a:63:46:f6:1b:
b5:08:f5:59:0c:ae:44:bf:c4:0e:27:ee:97:13:2b:
00:3f:42:3b:d6:88:2c:d5:81:0c:92:44:75:d4:49:
35:03:2b:ba:28:f2:82:77:cf:ee:a3:19:df:e9:9d:
34:f2:97:9b:42:59:b5:c0:cd:b6:2b:1a:50:fd:07:
f5:13:04:b6:6f:c6:49:aa:21:ae:1e:37:59:28:8d:
2b:85:18:c9:ef:9a:23:09:9a:79:3d:df:d0:76:74:
76:0f:5b:23:e9:c5:99:98:c4:9f:56:a4:67:95:a4:
8b:43:e4:a8:db:32:5f:ca:eb:b9:4f:02:fc:51:ae:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:53:3A:68:39:3D:20:A1:6D:35:EA:12:7F:37:F6:A6:C6:8D:4E
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vp5TOmg5PSChbTXqEn839qbGjU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:10::/44
Signature Algorithm: sha256WithRSAEncryption
5c:4d:93:cf:f6:c9:5d:74:77:e2:6a:72:34:1b:1c:08:58:c7:
4e:99:eb:3c:be:f4:fa:ed:41:4e:e5:37:5a:44:b0:41:dd:f0:
66:8f:48:f5:d5:2b:3b:7c:35:77:97:37:97:d9:47:de:3b:2f:
06:6f:8a:5e:fa:6f:12:89:32:23:01:f9:bd:73:70:bd:23:ac:
a5:dc:21:52:ca:5b:5b:d1:6e:b1:d4:31:56:c6:7d:3a:19:ce:
bb:69:d6:21:68:5a:88:3f:e9:d4:23:91:08:0f:c2:67:e5:bc:
f6:f1:22:9a:9d:f2:4c:90:1b:f6:7c:88:c7:67:eb:b7:ef:a6:
4b:a5:b0:fc:ce:c5:56:0a:f6:d0:2a:31:3d:d8:6d:c6:7c:8d:
be:ff:ed:23:86:4f:05:53:85:84:f4:7a:71:b1:21:c8:f4:e7:
65:1d:f6:ca:12:41:9f:60:2f:a3:32:d9:77:96:e1:60:dd:11:
62:b4:4b:03:ba:00:0c:c0:07:d5:e9:19:25:70:2a:be:bf:24:
50:11:e6:19:5c:2e:2f:13:23:50:5d:24:07:0b:23:db:31:67:
f8:00:61:a0:82:de:ba:85:ec:22:48:6c:ae:d5:67:6e:76:7c:
b7:98:a0:74:b3:28:b6:3f:d0:f3:8c:d1:1e:d4:75:0a:92:38:
2f:92:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:17:30 2026 by rpki-client